312-50V11 · Question #219
Which of the following is a passive wireless packet analyzer that works on Linux-based systems?
The correct answer is D. Kismet. Kismet is a passive 802.11 wireless network detector and packet sniffer designed for Linux that captures traffic without transmitting, making it undetectable on the wireless medium.
Question
Which of the following is a passive wireless packet analyzer that works on Linux-based systems?
Options
- AOpenVAS
- BBurp Suite
- Ctshark
- DKismet
How the community answered
(68 responses)- A3% (2)
- B1% (1)
- C1% (1)
- D94% (64)
Why each option
Kismet is a passive 802.11 wireless network detector and packet sniffer designed for Linux that captures traffic without transmitting, making it undetectable on the wireless medium.
OpenVAS is an open-source network vulnerability scanner used to identify security weaknesses in hosts; it has no wireless packet capture or 802.11 monitoring functionality.
Burp Suite is a web application security testing proxy focused on HTTP/HTTPS traffic interception and manipulation; it cannot capture wireless 802.11 frames.
tshark is the command-line packet capture tool from the Wireshark suite and can capture traffic on wireless interfaces, but it is a general-purpose analyzer and not specifically a passive wireless detector designed around 802.11 reconnaissance.
Kismet places wireless interfaces into monitor mode, allowing it to passively capture all 802.11 frames in range without injecting or transmitting any packets. It is purpose-built for Linux-based systems and supports passive detection of networks, clients, and encrypted traffic without alerting the target network.
Concept tested: Passive 802.11 wireless packet capture with Kismet
Source: https://www.kismetwireless.net/docs/readme/intro/
Topics
Community Discussion
No community discussion yet for this question.